$ rpki-client -vvf rpki.apnic.net/member_repository/A91623B9/78CEACBC2B3611ECAD595B7CC4F9AE02/mOHsvUXXh5-byUOfTGwvJxStNvU.mft File: mOHsvUXXh5-byUOfTGwvJxStNvU.mft (raw, json) Hash identifier: 6RSLDhhEYjZ2SSIOaztwHxTK7zvABKDZl57beG25N9g= Subject key identifier: 26:49:99:4B:E5:70:7C:DB:22:7B:29:73:4D:26:4E:7A:CC:73:58:8A Authority key identifier: 98:E1:EC:BD:45:D7:87:9F:9B:C9:43:9F:4C:6C:2F:27:14:AD:36:F5 Certificate issuer: /CN=A91623B9/serialNumber=98E1ECBD45D7879F9BC9439F4C6C2F2714AD36F5 Certificate serial: 04F2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mOHsvUXXh5-byUOfTGwvJxStNvU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91623B9/78CEACBC2B3611ECAD595B7CC4F9AE02/mOHsvUXXh5-byUOfTGwvJxStNvU.mft Manifest number: 04CF Signing time: Sat 10 May 2025 23:28:46 +0000 Manifest this update: Sat 10 May 2025 23:28:45 +0000 Manifest next update: Sat 17 May 2025 23:28:45 +0000 Files and hashes: 1: mOHsvUXXh5-byUOfTGwvJxStNvU.crl (hash: lCwCCfB+HcwmFvdW5ZrtiLbVpZxl4F8ro1lNrDTszPU=) 2: 4C304B9EA12F11EFBF514933C4F9AE02.roa (hash: lIJvzLYrLtuFIE0gyMhPk2/yxHi1SCB/LUlp5AIoj+E=) 3: 3B943DB8A12F11EF8A121F33C4F9AE02.roa (hash: wlCYlDts3RjNxBy/eT/e5B1Vtzz4yVgtwvYVdQThmhs=) 4: 6762893A976211EFA4D0606CC4F9AE02.roa (hash: /gYeqqbk6WlA+N6Yv/cuDVmH4COmNboDX4ybOjU2VTk=) 5: 5A67D452A12F11EF8CA59833C4F9AE02.roa (hash: u0zCnyDN76eHB+CmzgwmvJ+3FVkHG07LYemqATFaMtk=) 6: 29B935BCA12F11EF9FAFE232C4F9AE02.roa (hash: DkBXKwosqunys840APEr3udcdpKlpKYanK0TdpOCbNM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91623B9/78CEACBC2B3611ECAD595B7CC4F9AE02/mOHsvUXXh5-byUOfTGwvJxStNvU.crl rsync://rpki.apnic.net/member_repository/A91623B9/78CEACBC2B3611ECAD595B7CC4F9AE02/mOHsvUXXh5-byUOfTGwvJxStNvU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mOHsvUXXh5-byUOfTGwvJxStNvU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 23:28:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1266 (0x4f2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91623B9, serialNumber=98E1ECBD45D7879F9BC9439F4C6C2F2714AD36F5 Validity Not Before: May 10 23:28:45 2025 GMT Not After : May 17 23:28:45 2025 GMT Subject: CN=681fe12e-5ccf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:d9:1e:57:26:8c:7a:af:79:c8:ca:f3:3b:32: fd:d2:55:27:fc:d1:37:36:93:1d:43:a9:92:bc:9e: c6:f0:78:f4:b6:d7:b4:e0:e3:6f:70:d0:91:29:82: ce:ed:fd:5f:7b:48:6e:a1:6f:cb:f8:62:b1:35:70: ae:e6:dc:c8:32:b3:47:11:bf:e3:30:49:b7:3d:c9: ac:32:3d:80:12:25:2f:83:a3:e9:45:e8:9c:c3:54: f2:b2:3d:de:7a:62:77:7d:fa:25:77:64:9a:37:d4: f9:f5:2a:3a:05:90:b8:2a:dd:b4:42:22:e3:14:b9: f4:cc:43:36:04:54:a2:72:ed:b4:51:ff:63:6d:9e: 7f:36:fe:90:40:53:65:d4:28:8b:07:5b:c6:59:1d: 31:97:b4:1f:9d:27:f5:eb:f1:99:5d:3b:34:40:ef: 0c:9d:32:75:06:d7:bb:57:a8:a7:57:e8:e3:0b:b8: 2d:1c:e7:7b:ec:61:2f:8f:64:fd:d2:5b:94:cd:36: 04:49:39:41:05:7a:db:44:dd:38:04:aa:56:08:5f: c8:22:6e:30:7f:0c:b2:57:21:bd:ce:e1:b1:43:94: 9a:c4:cb:c1:fa:8c:80:8e:9f:ab:7d:ff:af:e0:69: 89:40:e1:63:71:e9:e7:01:8b:6a:2b:07:b4:78:ce: fa:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:49:99:4B:E5:70:7C:DB:22:7B:29:73:4D:26:4E:7A:CC:73:58:8A X509v3 Authority Key Identifier: keyid:98:E1:EC:BD:45:D7:87:9F:9B:C9:43:9F:4C:6C:2F:27:14:AD:36:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91623B9/78CEACBC2B3611ECAD595B7CC4F9AE02/mOHsvUXXh5-byUOfTGwvJxStNvU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mOHsvUXXh5-byUOfTGwvJxStNvU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91623B9/78CEACBC2B3611ECAD595B7CC4F9AE02/mOHsvUXXh5-byUOfTGwvJxStNvU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 45:16:3f:23:ea:74:d9:52:1b:f7:9a:2a:fd:ca:db:25:ba:c2: 49:25:44:df:7d:dd:c7:6a:cb:18:9e:d3:fe:73:bb:58:ef:83: 86:f7:9f:b0:23:63:0d:2b:8d:94:66:f9:46:32:1a:e8:83:f9: e0:5b:00:00:1f:f8:78:21:b4:4a:93:2a:3e:e3:f9:8d:2a:9f: 8b:18:a8:e5:b4:93:ce:a4:08:a7:59:73:55:84:d1:4b:d0:76: f2:8c:4f:b0:f2:2f:2b:09:4a:9e:08:f7:d7:9e:2a:5c:73:c2: cb:3b:59:28:71:aa:4d:d8:8b:73:8b:d9:fb:10:3c:d5:5a:74: 93:b8:09:9c:c9:2e:d7:75:f0:06:b8:b4:6a:8a:74:e3:2d:72: 92:07:5a:0d:df:1e:25:ce:75:c7:99:86:bd:53:4f:f0:70:6d: 62:72:4e:fc:43:9b:59:89:ad:b8:fe:dc:1f:fe:35:c1:bb:81: cc:24:ba:53:67:54:f6:8d:18:98:4f:7f:ce:c6:ee:19:c3:8f: 56:a1:b3:88:2d:ad:d2:5f:81:74:23:e5:ef:46:6f:00:38:aa: ba:c0:91:45:12:60:d9:72:68:cf:36:09:02:5f:8b:3e:65:1c: 19:6f:ab:ac:37:34:63:85:d7:2e:09:47:17:ab:7f:25:c5:30: 9a:9f:0d:13 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBPIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjIzQjkxMTAvBgNVBAUTKDk4RTFFQ0JENDVENzg3OUY5QkM5NDM5RjRDNkMyRjI3 MTRBRDM2RjUwHhcNMjUwNTEwMjMyODQ1WhcNMjUwNTE3MjMyODQ1WjAYMRYwFAYD VQQDEw02ODFmZTEyZS01Y2NmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt9keVyaMeq95yMrzOzL90lUn/NE3NpMdQ6mSvJ7G8Hj0tte04ONvcNCRKYLO 7f1fe0huoW/L+GKxNXCu5tzIMrNHEb/jMEm3PcmsMj2AEiUvg6PpReicw1Tysj3e emJ3ffold2SaN9T59So6BZC4Kt20QiLjFLn0zEM2BFSicu20Uf9jbZ5/Nv6QQFNl 1CiLB1vGWR0xl7QfnSf16/GZXTs0QO8MnTJ1Bte7V6inV+jjC7gtHOd77GEvj2T9 0luUzTYESTlBBXrbRN04BKpWCF/IIm4wfwyyVyG9zuGxQ5SaxMvB+oyAjp+rff+v 4GmJQOFjcennAYtqKwe0eM76iwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCZJmUvl cHzbInspc00mTnrMc1iKMB8GA1UdIwQYMBaAFJjh7L1F14efm8lDn0xsLycUrTb1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MjNCOS83OENFQUNCQzJC MzYxMUVDQUQ1OTVCN0NDNEY5QUUwMi9tT0hzdlVYWGg1LWJ5VU9mVEd3dkp4U3RO dlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21PSHN2VVhYaDUtYnlVT2ZUR3d2SnhTdE52VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MjNCOS83OENFQUNCQzJCMzYxMUVDQUQ1OTVCN0NDNEY5QUUwMi9tT0hzdlVYWGg1 LWJ5VU9mVEd3dkp4U3ROdlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBFFj8j6nTZUhv3mir9ytslusJJJUTffd3HassYntP+c7tY74OG95+w I2MNK42UZvlGMhrog/ngWwAAH/h4IbRKkyo+4/mNKp+LGKjltJPOpAinWXNVhNFL 0HbyjE+w8i8rCUqeCPfXnipcc8LLO1kocapN2Itzi9n7EDzVWnSTuAmcyS7XdfAG uLRqinTjLXKSB1oN3x4lznXHmYa9U0/wcG1ick78Q5tZia24/twf/jXBu4HMJLpT Z1T2jRiYT3/Oxu4Zw49WobOILa3SX4F0I+XvRm8AOKq6wJFFEmDZcmjPNgkCX4s+ ZRwZb6usNzRjhdcuCUcXq38lxTCanw0T -----END CERTIFICATE-----Generated at Mon May 12 16:17:21 2025 by rpki-client